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NATIONAL SECURITY AGENCY 


CENTRAL SECURITY SERVICE 
FORT GEORGE G. MEADE, MARYLAND 20755-6000 





FOIA Case: 66050C 
18 September 2014 


JOHN GREENEWALD 
THE BLACK VAULT 


us us 
| 
Dear Mr. Greenewald: 


This is our final response to your Freedom of Information Act (FOIA) 
request of 26 December 2011 for “A copy of each document at the National 
Security Agency concerning the famous KRYPTOS sculpture located on the 
grounds of the Central Intelligence Agency. Please review and release both 
documents that have already been made available as well as documents that 
have not yet been reviewed and/or released. I am particularly interested in 
documents regarding the as-yet undecrypted fourth message.” A copy of your 
request is enclosed. Since documents responsive to your request were 
available in other FOIA cases and the reproduction costs were minimal, we are 
not assessing fees for this request. Your request has been processed under the 
FOIA, and the final two documents that you requested are enclosed. Certain 
information, however, has been deleted from the enclosures. 


Some of the withheld information has been found to be currently and 
properly classified in accordance with Executive Order 13526. The information 
meets the criteria for classification as set forth in Subparagraph (c) of Section 
1.4 and remains classified CONFIDENTIAL as provided in Section 1.2 of 
Executive Order 13526. The information is classified because its disclosure 
could reasonably be expected to damage to the national security. Because the 
information is currently and properly classified, it is exempt from disclosure 
pursuant to the first exemption of the FOIA (5 U.S.C. Section 552(b}(1}). 


In addition, this Agency is authorized by various statutes to protect 
certain information concerning its activities. We have determined that such 
information exists in these documents. Accordingly, those portions a are есир 
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statute. The specific statutes applicable in this case are Title 50 U.S. Code 
3024(i); and Section 6, Public Law 86-36 (50 U.S. Code 3605). 


The Initial Denial Authority for NSA information is the Associate Director 
for Policy and Records, David J. Sherman. Since these deletions may be 
construed as a partial denial of your reguest, you are hereby advised of this 
Agency's appeal procedures. Any person denied access to information may file 
an appeal to the NSA/CSS Freedom of Information Act Appeal Authority. The 
appeal must be postmarked no later than 60 calendar days from the date of the 
initial denial letter. The appeal shall be in writing addressed to the NSA/CSS 
FOIA Appeal Authority (DJ4), National Security Agency, 9800 Savage Road STE 
6248, Fort George G. Meade, MD 20755-6248. The appeal shall reference the 
initial denial of access and shall contain, in sufficient detail and particularity, 
the grounds upon which the reguester believes release of the information is 
reguired. The NSA/CSS Appeal Authority will endeavor to respond to the 
appeal within 20 working days after receipt, absent any unusual 





circumstances. 
Sincerely, 
29м. 
E а. Ру , 
PAMELA N. PHILLIPS 
Chief 
FOIA/PA Office 
Encls: 


a/s 


Јипдегћеја, James R 


From: webteam@nsa.gov 

Sent: Monday, December 26, 2011 1:25 PM 

To: FOIANET 

Сс; john@greenewald.com 

Subject: Greenewald, John - FOIA Request (Web form submission) 


Name: John R Greenewald 


Email: john@greenewald.com 


Company: The Black Vault 


Postal Address: ИН. 
Postal city: О ЕШ 


Postal State-prov: Ca 


Zip Code: 8 


Country: United States of America 


Records Requested: 
Dear Sir, 


This is a non-commercial request made under the provisions of the Freedom of Information Act 
5 U.S.C. S 552. Pursuant to the U. S, OPEN Records Act of 2007, my FOIA requester status as 
a "representative of the news media" -- a status entitling me to an unlimited search 
processing my request, and the first 188 pages free of charge. For examples of my various 
publication credits in this regard, I refer you to my radio network, and my own personal 
radio show (syndicated on FM and AM stations) at http://www.blackvaultradio.com. My internet 
website http://www.theblackvault.com which holds a vast government document database, along 
with many freelance articles that I have written, which have also been published in magazines 
and websites, including OpEdNews.com, UFO Magazine, FATE Magazine, and others. 


Additionally, I agree to pay fees up to ten dollars. 


I respectfully request a copy of a copy of each document at the National Security Agency 
concerning the famous KRYPTOS sculpture located on the grounds of the Central Intelligence 
Agency. — Please review and release both documents that have already been made available as 
well as documents that have not yet been reviewed and/or released. I am particularly 
interested in documents regarding the as-yet undecrypted fourth message. 


Thank you so much for your time, and I am very much looking forward to your response. Please 
know that electronic delivery of the reguested material or correspondence related to this 
case is preferred and accepted in lieu of paper copies via snail mail. 


Sincerely, 


John Greenewald, Jr. 
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The CIA KRYPTOS Sculpture 


PL 86-36/50 USC 3605 
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cipher beginning: E MUFPHZLR 
repeating key: K R Y P T O S K R 


plain: P E T V J W R W J 


Line 1: PORSTUVWEXYZABCDEFGHIJKLMNO 
Line 2: EFGHIJKLMNOPQRSTUVWXYZABCD 
Line 3: TUVWXYZABCDEFGHIJKLMNOPQRS 
Line 4: VWXYZABCDEFGHIJKLMNOPOQRSTU 
Line 5: JKLMNOPQRSTUVWXYZABCDEFGHI 
Line 6: WX YZABCDEFGHITKLMNOPQRSTUV 
Line 7: RSTUVWXYZABCDEFGHIJKLMNOPQ 
Line 8: WXYZABCDEFGHIJKLMNOPQRSTUV 
Line 9: JKLMNOPQRSTUVWEXYZABCDEPFGHI 
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cipher beginning: EMUFPHZLR 


repeating key: K R Y P T O S K R 


plain: P E T V JW RW d 


Line 1 PORSTUVWXYZABCDEFGHIJKLMNO 
Line 2 EFGHIJKLMNOPQRSTUVWXYZABCD 
Line 3 TUVWXYZABCDEFGHIJKLMNOPOQRS 
Line 4 VWXYZABCDEFGHIJKLMNOPQRSTU 
Line 5: JKLMNOPORSTUVWXYZABCDEFGHI 
Line 6 WXYZASBCDEFGHIJKLMNOPORSTUV 
Line 7: RSTUVWXYZABCDEFGHIJKLMNOPQ 
Line 8 WXYZABCDEFGHIJSIKLMNOPQRSTUV 
Line 9 JKRLMNOPQRSTUVWXYZABCDEFGHI 


“GVK — MAN IN A JOB" 
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cipher beginning: EM U F P E Z L R 


repeating key: KR Y PT O S KE R 


plain: P E T V J W R W J 


Line 1: PQRSTUVWXYZABCDEFGHIJKLMNO 
Line 2: EFGEIJKLMNOPQRSTUVWXYZABCD 
Line 3: TUVWXYZABCDEFGHIJKLMNOPOQRS 
Line 4: VWXYZABCDEFGHIJKLMNOPOQORSTU 
Line 5: JKLMNOPQRSTUVWXYZABCDEFGHI 
Line 6: WXYZABCDEFGHIJKLMNOPQRSTUV 
Line 7; RSTUVWXYZABCDEFGHIJKLMNOPOQ 
Line 8: WXYZABCDEFGHIJKLMNOPQRSTUV 
Line 9: JKLMNOPQRSTUVWXYZABCDEFGHI 


“GVK — MAN IN A JOB" 
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Sanborn reveals a small portion of 
plain text for Part 4. The word 
“BERLIN” appears in positions 64-69 
of the message. 
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From The New York Times, November 20, 2010: 


...90 now, after 20 years, Mr. Sanborn is nudging the process along. 

He has provided The New York Times with the answers to six letters 

in the sculpture’s final passage. The characters that are the 64th through 
69th in the final series on the sculpture read NYPVTT. When 


deciphered, they read BERLIN. 
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From The New York Times, November 20, 2010: 


...S0 now, after 20 years, Mr. Sanborn is nudging the process along. 

He has provided The New York Times with the answers to six letters 

in the sculpture's final passage. The characters that are the 64th through 
69th in the final series on the sculpture read NYPVTT. When 


deciphered, they read BERLIN. 
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From The New York Times, November 20, 2010: 


|. ... 90 nOW, after 20 years, Mr. Sanborn is nudging the process along. 
He has provided The New York Times with the answers to six letters 
in the sculpture's final passage. The characters that are the 64th through 
69th in the final series on the sculpture read NYPVTT. When 


deciphered, they read BERLIN. 
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(U//F99O) Back in 1990, the Central Intelligence Agency's Fine Arts Commission canvassed 
Washington, DC, area artists, asking for proposals for costs and designs for a sculpture which 
would be erected in the CIA’s new Courtyard outside its cafeteria. The winning sculptor was 
James Sanborn, and he created a nice little puzzle. It stands about 3 metres (10 feet) tall, and con- 
sists of two curved copper plates standing side-by-side, forming an “S” shape if viewed from 
above. 


(U//FOUO) Before we look at the cipher on the sculpture, here's what James Sanborn had to say 
about his creation on November 3, 1990, the day it was dedicated: 


“The stonework at the entrance and in the courtyard served two functions. First, it 
creates a natural framework for the project as a whole, and is part of a landscaping 
scheme designed to recall the natural stone outcropping that existed on the site 
before the Agency, and that will endure, as do mountains. 


“Second, the tilted strata tell a story like pages of a document. Inserted between 
these stone pages is a flat copper sheet through which letters.and symbols have 
been cut. This code, which includes certain ancient ciphers, begins as international 
morse, and increases in complexity as you move through the piece at the entrance 
and into the courtyard. Its placement in a geologic context reinforces the text’s hid- 
denness as if it were a fossil, frozen in time.” 


(О/РӨБӘ» Оп Ше left side of the sculpture are letters punched through the copper and reading 
forward, creating a cipher message. On the right side are letters punched through in reverse and 
form a “Vigenere Square.” On the following page is the Vigenere square which appears in 
reverse on the right side when looking at the sculpture head-on as it appears in the picture on the 
first page: 


4145037 
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ABCDEFGHIJKLMNOPQRSTUVWXYZABCD 
AKRYPTOSABCDEFGHIJLMNQUVWXZKRYP 
BRYPTOSABCDEFGHIJLMNQUVWXZKRYPT 
CYPTOSABCDEFGHIJLMNQUVWXZKRYPTO 
DPTOSABCDEFGHIJLMNOUVWXZKRYPTOS 
ETOSABCDEFGHIJLMNQUVWXZKRYPTOSA 


(U/FOUGOTFig. 1. Vigenere Square from KRYPTOS sculpture 


FOSABCDEFGHIJLMNOUVWXZKRYPTOSAB 
GSABCDEFGHIJLMNOUVWXZKRYPTOSA BC 
HABCDEFGHIJLMNQUVWXZKRYPTOSABCD 
.IBCDEFGHIJLMNQUVWXZKRYPTOSABCDE 
JCDEFGHIJLMNQUVWXZKRYPTOSABCDEF 
KDEFGHIJLMNQUVWXZKRYPTOSABCDEFG 
LEFGHIJLMNQUVWXZKRYPTOSABCDEFGH 
MFGHIJLMNOUVWXZKRYPTOSABCDEFGHI 
NGHIJLMNOUVWXZKRYPTOSABCDEFGHIJL 
OHIJLMNOUVWXZKRYPTOSABCDEFGHIJL 
PIJLMNQUVWXZKRYPTOSABCDEFGHIJLM 
OJLMNQOUVWXZKRYPTOSABCBEFGHIJLMN 
RLMNQUVWXZKRYPTOSABCDEFGHIJLMNOQ 
SMNQUVWXZKRYPTOSABCDEFGHIJLMNQU 
TNQUVWXZKRYPTOSABCDEFGHIJLMNQUV 
UQUVWXZKRYPTOSABCDEFGHIJLMNQUVW 
VUVWXZKRYPTOSABCDEFGHIJLMNQUVWX 
WVWXZKRYPTOSABCDEFGHIJLMNQUVWXZ 
XWXZKRYPTOSABCDEFGHIJLMNQUVWXZK 
YXZKRYPTOSABCDEFGHIJLMNQUVWXZKR 
ZZKRYPTOSABCDEFGHIJLMNQUVWXZKRY 


ABCDEFGHIJKLMNOPOQORSTUVWEXYZABCD 





ters on the first line. On each of the next 26 lines, the A-Z alphabet appears in the first position on 
each of the lines. Following the “A” at the start of the second line, is a keyword-mixed alphabet 
based on the word "KRYPTOS". After the Z at the end of the 26-long KRYPTOS alphabet, the first 


four letters of KRYPTOS appear again, to make a total of 31 characters appearing on the line. On 
the third line, following the “B,” appears the same KRYPTOS alphabet, but shifted one spot so that 


it begins with the letter R. Once the entire shifted 26-long KRYPTOS sequence is used (R through 
K in this instance), the first four letters of that shifted alphabet then reappear at the end of the line 


followed immediately by the first four letters of the alphabet, ABCD, making a total of 30 charac- 
(RYPT in this case). 


(U//FO9O) There are 28 lines on this side of the sculpture. On the top row is the A- Z alphabet, 


4145037 
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(U//FOUO) This process continues through the rest of the 26 lines labeled A-Z at the beginning 


of each line, except for the line labeled “N.” On this line, the shifted KRYPTOS sequence begins 
GHIJ..., and finishes ...CDEF..., but instead of following with the first four letters from that offset, 


GHIJ, five letters appear instead, GHIJL. 


Z alphabet 


the A 


followed by the letters ABCD. So we have two things to notice from this side of the sculpture: we 


have the Direct Standard alphabet (A- Z), and a KRYPTOS keyword-mixed sequence. 


> 


(U/4EOQUO) The 28th line of the Vigenere Square is just a repeat of the top line 


(U/46t0) Below is a copy of the cipher side of the sculpture: 


(U/ZEOUOr Fig. 2. Cipher side of sculpture 


EMUFPHZLRFAXYUSDJKZLDKRNSHGNFIVJ 
YOTQUXOBOVYUVLLTREVJYOTMKYRDMFD 
VFPJUDEEHZWETZYVGWHKKOETGFQJNCE 
GGWHKK? DOMCPFOQOZDOMMIAGPFXHORLG 

TIMVMZJANOLVKOEDAGDVFRPJUNGEUNA 


OZGZLECGYUXUEENJTBULBOCRTBUDFHRR 
YIZETKZEMVDUFKSJHKFWHKUWOLSZFTI 
HHDDDUVH?DWKBFUFPWNTDFIYCUQZERE 


EVLDKFEZMOQQJILTTUGSYQPFEUNLAVIODX 
FLGGTEZ?TFKZBSFDQVGOGIPUFXHHDRKF 
FHONTGPUAECNUVPDJMQCLQUMUNEDFOQ 
ELZZVRRGKFFVOEEXBDMVPNFQXEZLGRE 
DNOFMPNZGLFLPMRJOYALMGNUVPDXVKP 
DQUMEBEDMHDAFMJGZNUPLGEWJLLAETG 


ENDYAHROHNLSRHEOCPTEOIBIDYSHNAIA 
CHTNREYULDSLLSLLNOHSNOSMRWXMNE 
TPRNGATIHNRARPESLNNELEBLPIIACAE 
WMTWNDITEENRAHCTENEUDRETNHAEOE 


TFOLSEDTIWENHAEIOYTEYQHEENCTAYCR 
EIFTBRSPAMHNEWENATAMATEGYEERLB 


TEEFOASFIOTUETUAEOTOARMAEERTNRTI 
BSEDDNIAAHTTMSTEWPIEROAGRIEWFEB 


AECTDDHILCEIHSITEGOEAOSDDRYDLORIT 


RKLMLEHAGTDHARDPNEOHMGFMFBEUHE 
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(U/O00) There are 869 characters appearing on this side of the sculpture. That count includes 


the four question marks which are scattered throughout. 
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(U//FOU9y There are a few other things to point out here as well. The 15th line of the cipher 
begins with the letters END, and of the letters YAHR which follow it, the Y, A, and R are raised up 
about 1 cm. (about 1/2 inch). This made analysts at NSA wonder is the END was perhaps the end 
of a certain portion of cipher. And maybe the Y, A and R floating in the air a bit higher than the 
other letters on that line may signify something else as well. 


(U//FOG89) Well, in February of 1999, a CIA employee named David Stein, stated to the world 
that he had solved three of four sections of the sculpture. And the world pretty much ignored him. 
Then just four months later in June 1999, a private citizen in California named James Gillogly, 
who had a hand in developing the CRYSS software for the FBI, announced on the Internet that he 
had also solved three of four parts. 


(U/FEFEGillogly received all sorts of accolades for his accomplishments from the media, 
which made Mr. Stein at the CIA a bit miffed. You see, Mr. Stein had used just a pencil and paper 
to come up with his solution, but Mr. Gillogly in California had used his computer to arrive at his 
answer. Mr. Stein believed it to be “cheating” to use a computer, but Mr. Gillogly was quickly 
supported by others within the intelligence community as anyone working for such an Agency 
would almost certainly use a computer when solving codes and ciphers. . 


+~GHSB-Back in 1992, William Webster, the Director of the CIA at the time, also challenged NSA 
to read the cipher, and my fellow colleagues also read three of four parts. It’s just that it was seven 
years before these other individuals. 


(U//FOHOP-A fter the findings presented by Mr. Stein and Mr. Gillogly[ | presented a 


talk on September 14, 1999, on the work done by NSA seven years prior. The Internet was just 

beginning to grow at that point in time, and he kept an eye out for someone who might be the first 

to solve remaining portion of the cipher. 

(U/4EGUO) This was one thing that Lance found: PL 86-36/50 USC 3605 
(U//FO'UO) Fig. 3. From website claiming to have the solution to the KRYPTOS scuplture. 


cipher beginning: 
repeating key: 


plain: 


C, Zi m x C < rj bj U 
а оома с = Юю 
E KHKE x < o v 
= NCN= «K 5= m m 
ZP<SPZENKHH 
ρα σ Ἢ απ να CG OHNO 
гг ва KH I mH 
t= m= cs π΄. 
тҥн Z > = < Q 
ωοςσοω Z H EFE 
OQ G πο O X= x H 
Ü O t'i O Ὁ π Z, 41 
Ej o0 x = td O O Ñ w 
"2 5η π 2 Ὁ)» Γ' 
Ω 4Ο ΠΩ O O DU = 
m= G G G Ὁ Ω z 
H < O < H CG ωὉ Ο 


1: 
2: 
3: 
4: 
5: 
6: 
27: 
8: 
9: 
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(U//FGUOr This particular individual started with the beginning of the cipher itself, EMUFPH- 
ZLR. He happened to notice the KRYPTOS alphabet in the Vigenere Square, and so he tried a very 
reasonable thing, simple addition. E is the 5th letter of the alphabet, and K is the 11th letter of the 
alphabet, so if we add 5 and 11 we get 16, and P is the 16th letter of the alphabet. Then M, the 13th 
letter, is added to R, the 18th letter. That adds up to 33, but in mod26 arithmetic, that's 5, which is 
an E. The same process continues until PETVJWRWJ is obtained. 


(U/ZF8G8O) Now, that's not plaintext, but if you begin with each of those letters, and extend the 
A-Z alphabet out beyond them, in one of the columns reading down you get GVKMANINA, and 
JOB at the bottom of the column immediately to its right. According to the web site, GVK-MAN 
IN A JOB is the solution. His website also highlights the word APE reading down in the first 
three rows of one of the columns. 


| (О/ЯҒӨБӘ) Тһе website explains: 


“The Sanborn sculpture is an hornage to CIA agents at work, wherever they may 
be. For those of you who want to know the rest, it gets somewhat tougher as you 
move on. 


“Good luck! P.S. I am not an agent. I am just ostensibly good at deciphering codes 
and mysteries.” 


2455 For most people at NSA, most thought there were three sections. The first section con- 
tained the first 14 lines, and I'll talk about it in a bit. The next 11 lines were believed to be a trans- 
position as they had a distribution of letters that resembled that of English plaintext. The final 
three lines were unknown. 


(U/4FOUO3-We'll examine the top 14 lines first: 


(U//KOUO) Fig. 4. Top 14 lines of cipher 





O UO tr m m Dd πὶ «ὁπ H OQ 4o ш 
O ΕΙΠΕ! « Πε N H O YO = 
аомодосномчозм= ома 
= m 8 2 Q ÜU ÜU tj tq < m C O πι 
tJ Z < B 3 πα U d i Z = C d tg 
U CU J Q td m Cl >q tJ q δὲ πὶ 
m =Z = g m ма πω συ πο EN 
U q @ q -o N m J Q > uU tut 
KON mj Z ο Ξ 4 Z O W OV 
m tt m di q O O < G O Z t < m 
Ü m m Q t O = Ü 4 H OQ = < > 
P» t < Z tD O υπ αν 
tj 'U O C (n C, IJ H A fH < νά 
= = t < m Ft mj >q DJ O O ta t: G: 
ει J t rg Ὁ 3 q m Z tJ tq ὁ Γ! τα 
Q a ba DO παει Ὁ ο «4 Ὁ 
tq O tJ G, < c ig I g p O @ t u 
` Z < Ü Z Q Q = = U Q Z = P Ἀπ 
q > Z oO oO mn Z d G GU Z= m <N 
qti < Q Q τί SHARAD 
p E UU b (O0 Ü I DJ rq 5: > r< D 
Q Q Z O 'u tg ml q O g Q O O Xx 
bJ 22 m C CI m a d O g tg tT 3 v 
z G! O = m m 4 z J CG m 3 = ш 
сага мамасомзамахло 
H uUmHZTEZGAt vr 9xK IMI 
t O Ñ tJ r H O tn G Q O O > Q 
> b t: Ü Ü P: tq q Ü tJ g G, D Z 
πι « Ω πὶ π! « πὶ πὶ πὶ Οἱ Εἰ 22 = πὶ 
а q J O 1 H g 3 i Z Q Q m H 
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(U//FOUO) The strength in polyalphabetic substitution is that the same plaintext letter will not 
always be enciphered to the came cipher letter.as each encipherment is dependent upon the alpha- 
bet enciphering it. And with multiple alphabets, there are multiple ways for each plaintext value to 
change. Similarly, identical ciphertext letters did not always evolve from the same plaintext value: 
they can be spawned from two entirely different plaintext values. 


(Олово The weakness of polyalphabetic substitution is if you have a rather long message, 
then the frequency counts of each of the alphabets will begin to look like some offset of some 
alphabet. Luckily for us we have 432 characters and eight alphabets, so that should be long 
enough for us to make some headway in solving. 


(U/POUO)Given that the sculpture mentions the A- Z alphabet, as well as the KRYPTOS key- 
word-mixed alphabet, these two alphabets seemed to be the reasonable places to begin. It may 

very well be something different, but it pays to try the easiest thing first, and if that doesn’t pro- 
duce results, advance to something else. 


(U//FO36) Fig. 6. Alphabet frequencies for eight alphabets, Direct Standard order 


ғ 
Pe PWN OWN DO 


D 
2 
3 
3 
3 
11 
4 
1 
1 


но ма ноја ма с 
A A JW H H ui WP EJ 
WP ODN 1 BN HJ 
JN HDI JON O 
OH HD HH | Por 
t0 1 PP N N Wu H GO 
A I HI JN H H x 
к Q O N Ë P η. p EF 
лс юш I HO Z 
Ho H I HED 1 OW 
мна шилт мыту 
IP а-о PH i! P F NM (n 
NUP 1 Wp 1 43 
W ND b W یرب‎ ыс 
W OI H Ñ W H p < 
юе HON Hos p P < 
1 WU DN W H N B N 


к 


A I H 1 амнын xX 
πι ΝΤ £ P: = на 
Ñ 1 Wut NY we 
NUP) BWP 1 43 
pp Pr DO 
ок н шо P) UN) à P 
HD 1 40: H+, ош” 
H 

Ho HP H W W W N O 
OY O JW pH H U N k 
W POJAN 1 o5 Ко "J 
SN |! ir JW N O 
IH HN HH I NH 
NIH NNW ip CG 
P U оу ю η! ARE σι 
л обо N ш тою мю т X 
H H | ο” мю о 2 
WN PW DP We GG 
wo кю мю о ҥн H «< 
I G R юм Q p N S Ë 
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(U//FO86} Looking at these frequency distributions, someone noticed that the sixth line of the 
KRYPTOS alphabet frequencies looked good when the alphabet was slid at this offset: 


(U/FOO}F ig. 8. Sixth KRYPTOS alphabet frequencies slid against KRYPTOS sequence. 






1 1 1 - 1 - 1 1 - - 47 9 1 1 1 1 6 2 - 4 4 - 1 3 5 
Q U V W X Z KR Y P T O S AB C D E F G H I J L M N 


(U//FOUOY And looking at the eighth KRYPTOS alphabet frequencies; they looked good when 
the KRYPTOS alphabet was slid thusly: 


(U//FOBOy Fig. 9. Eighth KRYPTOS alphabet frequencies slid against KRYPTOS sequence. 





(U//FGUO) These two alphabets matched decently, so they were filled in, and this was the result- 
ing plaintext: 


(U//FGUOY-Fig. 10. Plaintext recoveries for sixth and eighth alphabets. 


EMUFPHZL RFAXYUSD JKZLDKRN SHGNFIVJ YQTQUXQB QVYUVLLT КЕУСҮОТМ 
ох RL S K UW T I WE K Z 





KYRDMFDV FPJUDEEH ZWETZYVG WHKKOETG FOJNCEGG WHKK?DOMC PFQZDQMM 
МІ ОА VS os ο 5 ? HY HE 


IAGPFXHQ RLGTIMVM ZJANQLVK QEDAGDVF RPJUNGEU NAQZGZLE CGYUXUEE 
MG FE EN το АН N T I T 


NJTBJLBO CRTBJDFH RRYIZETK ZEMVDUFK SJHKFWHK UWQLSZFT IHHDDDUV 
| Е С ТА oN IN LN NW ТІ 


H?DWKBFUF PWNTDFIY CUQZEREE VLDKFEZM OQOJLTTU GSYQPFEU NLAVIDXF 
? so 59 UT . OE XH SH TO 


LGGTEZ?FK ZBSFDQVG OGIPUFXH HDRKFFHQ NTGPUAEC NUVPDJMQ CLQUMUNE 
N? N H S SA SG R Y DG IT 


DFQELZZV RRGKFFVO EEXBDMVP NFQXEZLG: REDNOFMP NZGLFLPM RJQYALMG 
МІ ' SX F V NS sv EE Е 5 


NUVPDXVK PDQUMEBE DMHDAFMJ GZNUPLGE WJLLAETG 
MN от sc ET ο s 


(U//FOUO7One thing that needs to be pointed out: the question marks were ignored in the count- 
ing of the alphabets. This work seems to have gone well. There are a limited number of letters that 
can be placed between the recoveries made to this point. 
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(U//EQ3O) Continuing work in this fashion, if one guessed an “I” occurs between the “S” and 
“x” on the next to last line, the resulting recoveries look like this: 


* (U//FOUO) Fig. 11. Plaintext recoveries for sixth, seventh and eighth alphabets. 


EMUFPHZL RFAXYUSD JKZLDKRN SHGNFIVJ YQTQUXQB QVYUVLLT REVJYQTM 
OSX RGL SBK UPW TRI WXE KEZ 


KYRDMFDV FPJUDEEH ZWETZYVG WHKKQETG FOJNCEGG WHKK?DOMC PFQZDQMM 
MLI OTA VIS ^ OWS OSS ? HEY HEE 


IAGPFXHQ RLGTIMVM ZJANQLVK QEDAGDVF RPJUNGEU NAQZGZLE CGYUXUEE 
MAG FIE EIN TIO ATH NDT ITT 


NJTBJLBQ CRTBJDFH RRYIZETK ZEMVDUFK SJHKFWHK UWQLSZFT IHHDDDUV 
ERG ТОА ΟΝΝ ION LAN NOW THI 


H?DWKBFUF PWNTDFIY CUQZEREE VLDKFEZM OQQJLTTU GSYQPFEU NLAVIDXF 
? SHO. SBU UTT OME XWH STH TLO 


LGGTEZ?FK ZBSFDQVG OGIPUFXH HDRKFFHQ NTGPUAEC NUVPDJMQ CLQUMUNE 
N?ON HIS. SLA SAG RTY DEG IFT 


DFQELZZV RRGKFFVO EEXBDMVP NFQXEZLG REDNQFMP NZGLFLPM RJQYALMG 
NMI ` SIX FIV NDS SEV EVE EES 


NUVPDXVK PDQUMEBE DMHDAFMJ GZNUPLGE WJLLAETG 
MIN ORT SEC EST OWS 





(UHEOUO) Work continued in this mode, adding on a letter to either end of the recoveries made 
to this point. Staying with the next to last line, it appears numbers were being spelled out. SIX 
already appeared, and it also looks as if FIVE, SEVEN, and THREE occur later on that line. 


(ПЛ ӨНӨ» The only portion of the message where things don't look good is at the top. The 


recoveries there are ugly! QSX. SBK. WXE. All nasty-looking trigraphs in English. But things look 
pretty good from the second line forward. 
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(U7FOGUO) Continuing to expand these trigraphs into longer stretches of plaintext, we eventually 


get this: 


(U//F9UQ) F ig. 12. Plaintext recoveries for top 14 lines of KRYPTOS sculpture. 


EMUFPHZL 


NXTRCQSX 


KYRDMFDV 
BBDZXMLI 


IAGPFXHQ 
ARTHSMAG 


NJTBJLBQ 
EDUNDERG 


RFAXYUSD 
CMJGBRGL 


FPJUDEEH 
TWASTOTA 


RLGTIMVM 
NETICFIE 


CRTBJDFH 
RUUNDTOA 


JKZLDKRN SHGNFIVJ 
XSBSJSBK HOVBMUPW 


ZWETZYVG WHKKOETG 
LLYINVIS IBLEHOWS 


ZJANOLVK OEDAGDVF 
LDXTHEIN FORMATIO 


RRYIZETK ZEMVDUFK 
NUNKNOWN LOCATION 


YOTQUXQB 
DKGCRTRI 


FOJNCEGG 
THATPOSS 


RPJUNGEU 
NWASGATH 


SJHKFWHK 
XDOESLAN 


OVYUVLLT REVJYQTM 
YYEDYWXE CLOOBKEZ 


WHKK?DQMC PFQZDQMM 
IBLE?THEY USEDTHEE 


NAQZGZLE CGYUXUEE 
EREDANDT RANSMITT 


UWOLSZFT IHHDDDUV 
GLEYKNOW ABOUTTHI 


H?DWKBFUF PWNTDFIY CUQZEREE VLDKFEZM OQQJLTTU GSYQPFEU NLAVIDXF 
S?THEYSHO ULDITSBU RIEDOUTT HERESOME WHEREXWH OKNOWSTH EEXACTLO 


LGGTEZ?FK ZBSFDQVG OGIPUFXH HDRKFFHQ NTGPUAEC NUVPDJMQ CLQUMUNE 
CATION?ON LYWWTHIS WASHISLA. STMESSAG EXTHIRTY EIGHTDEG REESFIFT 


DFQELZZV RRGKFFVO EEXBDMVP NFQXEZLG REDNQFMP NZGLFLPM RJQYALMG 
YSEVENMI NUTESSIX POINTFIV ESECONDS NORTHSEV ENTYSEVE NDEGREES 


NUVPDXVK PDQUMEBE DMHDAFMJ GZNUPLGE WJLLAETG 
EIGHTMIN UTESFORT YFOURSEC ONDSWEST IDBYROWS 


(U//FOUO) The plaintext reads: 





“IT WAS TOTALLY INVISIBLE HOW IS THAT POSSIBLE ? THEY USED 
THE EARTH’S MAGNETIC FIELD X THE INFORMATION WAS GATHERED 
AND TRANSMITTED UNDERGRUUND TO AN UNKNOWN LOCATION X 
DOES LANGLEY KNOW ABOUT THIS ? THEY SHOULD IT'S BURIED 
OUT THERE SOMEWHERE X WHO KNOWS THE EXACT LOCATION ? 
ONLY W W THIS WAS HIS LAST MESSAGE X THIRTY-EIGHT DEGREES 
FIFTY-SEVEN MINUTES SIX POINT FIVE SECONDS NORTH SEVENT- 
SEVEN DEGREES EIGHT MINUTES FORTY-FOUR SECONDS WEST I'D 
BY ROWS 


(U//FOU€Ht should be pointed out that UNDERGRUUND is a misspelling of “UNDER- 
GROUND,” but that’s exactly how it decrypts. 


—cCONFIDEMNTIAL/REL-FO-ESA.FV-EY7/20320108— 
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(U/FOUO) As to the information transmitted underground, and exactly what's buried out there, 
your guess is as good as mine. However, the WW almost certainly refers to William Webster who 
was director of the CIA when the sculpture was commissioned. 


(Пиве The meaning of the last portion, 1 D BY ROWS, was a stumper, and we'll return to 
this later to see what it really means. 


(UHFOHOJIf you follow through to obtain the matrix used to encipher this portion of the sculp- 
ture, this is the periodic polyalphabetic matrix obtained: 


(U//FOU9O) Fig. 13. Enciphering matrix for portion of KRYPOS Sculpture 


P дана ту: ја 
QU » » GU» ou: 
Q U U E' m ug O OQ +< 
g Q n € unt Uu tg 
ΠΟ ΖΩΟ "ΠΗ 
"J EJ td OO CD Di GQ d O 
Q m πι ΟΠ πὶ ΠΩ τ 
m Q Q < C Q H t > 
a m m = Com Gon ow 
GHH¢+ZHE UA 
ts C C q Z G = t: UD 
= r: t: = O ta ZZW 
Z = = = q = O шч 
O z = < < = q O Q 
O O ' = O < q Ir 
«ασ dq CG = <H 
Z<<son<xkzu 
ME SMR SEN ME 
tq p< MP AM AN S 
ANNWHKHNADAS 
tg q 4 Q td AK DO 
4 tg O O d m tg < d: 
юкка омж ню. < 
3 tg tg rq (n rg O J = 
O 3 dg Q p H m O x 


(U//FGUO) The plain and cipher components both use the keyword-mixed sequence based on 
KRYPTOS, with the cipher offset according to the repeating key of ABSCISSA, which can be 
seen reading down the column beneath the plaintext letter A. To refresh your memory, an abscissa 
is the horizontal cartesian coordinate on a plane measured from the y-axis along the line parallel 
to the x-axis at point p. How this fits in to the overall solution of the sculpture remains to be seen. 


(U//F9U9) Originally we believed there were three portions to the cipher. Suddenly, the first part 
has become two parts, and we’ve read just one part of what is now a four-part puzzle. 


(U//FOBO) Next, let's look at the section that contains lines 15-25 of the cipher. This section was 
believed to be enciphered by a transposition. 
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^8 E 
n S кї н н os 
552 H m. Hime m 
259° | <ы<қынақыо м 
Z Z Q O < "τ Z Ia — m m 

m = < m H x H = n m oO 

W X H Kd πα R$ x Po. 

> X HE ZE m & M = 
AKOMZM> MEA πὶ 
HzdBbmudWsonzo 

m c m t m m = < ama 

ΠΟ πίοι κο ΟΡ» 

2 |o Z dH. > < < x κα ΞΕ 
Ε |μ "Ὁ Ἡ ΞΟ πμ x m 
в |ншдынкнноон 
a | OZ Z > Εἰ 0 οι Ὁ πὴ Εἰ 
5 ода A m O < m Z m Z m 
S O dd Ὦ ΕΕ H Z < M H Γι τῇ 
5 MHoHAUAMADAHAY 
[1 0} Πι шан ОО Ж 
= [απ αἱ απ τὰ ma z m am 
2 сшысыедаовнншы 
а | длевмшввннмнав 
5 |зазажжошонн 
8 |шашынанжыа сы 
J | OPHEE EE «H « fo 
x MMH HAN UH FH FG 
οὗ jM mM < n m x < Z Q m H 
~ |амозошова ли 
» 5 z = jq H m n R x= z 
пш тновшшгрш оо AN 

= |= m pn z mH FH τη Π O 
Ὁ, [ει Ξε Mf M m m 
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(049599) The approach tried by those working on the cipher was a reasonable one for those 
attempting to solve a transposed message. It was noticed that there was exactly one Q appearing in 
this section of the cipher. A letter U would probably follow it, and there were five Us appearing in 
this portion of the cipher. So a reasonable thing to do when attempting to determine the transposi- - 
tion, matrix used is take the stretch of cipher containing the Q, and take a handful of letters before 
and after it, and write them as a column. Then take all the occurrences of U, and also grab a couple 
letters before and after them, writing them in as a column immediately to the right of the column 
with the Q. 


(U//FOUO) Fig. 16. Lines 15-25 with stretches of cipher containing the Q and the Us aligned 
columnarly. Extracted stretches are underlined to assist the reader in finding their location within 
the cipher. Stretches containing U are underlined once. The stretch with the Q is doubly under- 
lined. 


а = О N 
Hj zug 
шон 
ZH xe 


5 5 ζη ΒΙ Γι π = oe 
DFO HOH HA Ὁ 
Ξ 234909496t z Z [Z « 
= í Gg g O m mn Z Q vp 
H J O Z > m bj D >p l: x 
π πὶ ΠΙ Εἰ ζη (n D H HJ |< v 
πρ p |TJ tG d d H [qa O 
Ld Q E?" PW PH we oi ш 
H dO m O Z = t = g = 
OO tu 44 x πι 2 ја H 
Шан задатој а 
тъш а το =Z rw 
Z= απ (n (dB = ο што: 
σι ο H за Bl m оныг tai 
HoH eI BZA neo 
tn = m HHP OFM FEF an 
Уы a Ὁ onj 
"om m m O xl c mu tm 
H x P 7 p |< g H 2 O 
Олова а ји c c w 
ој U Q » alti EP = 4 
uj ^ O ZJ tm wt Z t w o 
SDH wt 
ос ашошоврнљмоа 
ош О = H m Hd πι 5 Ξ πὶ 
το | ποσο ο Z Z 

OH AWK HP mp 


J OO H H » 
4ааооян 


р 


Y N 
ТЕ 
Е.Е 
ҮҮ 
QU 
HL 
E D 
E S 
N L 


. £ ti td fO e b Hoà 
H BiU O C B Z t 3 
Z m td t ao ow moo 
αἱ νὰ πι αἱ 4 Ο εἰ πι 
Zi oni m QO еніне 
= O m= > d d σι αἱ 3 
= bj m πι ΚΟ) «K πι η +< 
Ω Pi Dj m Ci ti m Z ™ 


(U/FGUO) The idea is to find columns that look like portions of readable English text. None of 
these looks too bad. Any of them could contain short stretches of English. The YY in the first col- 
umn might be a little problematic, as is the HH (unless the plaintext is talking about Fishhooks or 
something). The third alignment here looks pretty good. The EO could occur in the word PEO- 
PLE,or THE ONLY if it was two words. Beneath the QU we have HE which looks really good for 
THE. So it was decided to try to build upon that. 


-CONFEIDENTIXEZREL-TO-USA,F VEY7/20320108- 
14 


ΡΟΟΙΡ: 4145037 


(U//FOGUG) Another stretch of cipher that looked good when placed to the left of the QU was 
found. 


(0/ΡΟΡΟ) Fig. 17. Three stretches of Lines 15-25 aligned columnarly. 


< Z = O тю 
шашы 
= td O H 


σπω >p = tJ [xz tj ο (n tJ 
O = O Q > Q [H ΤΙ Z H 


m IA IK a UO 
ο ty BJ UO «< B] D ы р 


E 
C 
T 
W 
T 
Е 
Т 
В 
А 
К 
Е 


OQ Wi OU 5m H 5 = tg m 2 
σσωπω το HAD -ἲ Ὁ 
= = d U m d t: x= Z Z +< 
ak OÜ GO O D mn Z O Vp» 
H UO Z p πι Ὁ 5 π πὶ 
ој omi oH UO Und uu 
Y>PHPM gG B d H G: O 
HQ Co 2 Id PH mm ti x 
H 3 G m |O = x= td Z D = 
= J tJ 3 41 πι tj Z Z UF 
td Hi oH oH JG aaa Pen 
mde m xu onm ponr w 
z = (n (η ]11 Ξὶ »' Πὶ πι τη ΠῚ 
t'* OQ H dd B bl OQ td ta πι 
tn g g ш> H d (n i: O 
mn 2 tj = tU y. O и д о 
7B m B tH O = [rd C p c t 
HPUPDPHRUUZZO 
Ξ! πὶ Ὁ Γι ΒΙ ΕΙ [εὐ ΠῚ γι к 
VY CK HOMMAN PH xD 
O mm Ü = ἲ Z dg 7 = = 
D ta tt j 2 t p O OQ Z Z 


4 ΠΩ σου 
H O OHI» 
<Q OOWH 


ж 


> m Ὁ 3 Q > m F 
Z titu mO uud 
эснашцояонын 





(О/А“ӨБӨЗ-Аргіпһ, things look nice. Before the QU is a word ending with G. The AYT above it 
could be from DAY TIME or something like that. HEO above it could be THE ONLY. ETI above 
it could be SAME TIME, or something along those lines. More progress was made as additional 
cipher stretches were extracted and added to the left of these three columns. 
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(U//FOUOFi g. 18. Five stretches of cipher from Lines 15-25 extracted and aligned columnarly 































у> J q ж Q p O 
ΠΗ εἰ Ὁ 5 x= η = 
ρα расом» шиши 
Zt bb HO REH η] τῷ 
> G Hd EJ GQ Hd O H "i 





ENDYAHROHNLSRHEOCPTEOIBIDYSHNA 
CHTNREYULDSLLSLLNOHSNOSMRWXMNE 
TPRNGATIHNRARPESLNNELEBLPIIACAE 
WMTWNDITEENRAHCTENEUDRETNHAREOE 
|JTFOLSEDT IWENHAEIOYTEYOHEENCTAYCR 
EIFTBRSPAMHNEWENATAMATEGYEERLB 
TEEFOASFIOTUETUAEOTOARMAEERTNRTI 
BSEDDNIAAHTTMSTEWPIEROAGRIEWFIESB 
AECTDDHILCEIHSITEGOEAOSDDRYDLORIT 
RKLMLEHAGTDHARDPNEOHMGFMFEUHE 
ECDMRIPFEIMEHNLSSTTRTVDOHW?OBKR 






(U/4EGUO) Still looks good! A word ending with ING precedes the QU. Above the QU it looks 
‘like UNDERWAY or STAIRWAY followed by a word starting with T. 


(U/AF600) Work continued in this fashion until finally, the plaintext and its matrix were found! 
An incompletely filled transposition matrix with four rows and 86 columns was recovered. Here’s 


the matrix which was used, split in two so it would fit below: 


(U//F889) Fig. 19. Incompletely filled 4x86 transposition matrix used to encipher lines 15-25. 


SLOWLYDESPARATLYSLOWLYTHEREMAINSOFPASSAGEDE... 
ASREMOVEDWITHTREMBLINGHANDSIMADEATINYBREACH... 
OLEALITTLEIINSERTEDTHECANDLEANDPEEREDINTHEH... 
FLICKERBUTPRESENTLYDETAILSOFTHEROOMWITHINEM... 





£ Ó N ~ 


. BRISTHATENCUMBEREDTHELOWERPARTOFTHEDOORWAYW 
. INTHEUPPERLEFTHANDCORNERANDTHENWIDENINGTHEH 
. . OTAIRESCAPINGFROMTHECHAMBERCAUSEDTHEFLAMETO 

. ERGEDF ROMTHEMISTXCANYOUSEEANYTHINGO 
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(0/ΡΘ5Θ)ΤΠε plaintext from this portion of the cipher reads: 


“SLOWLY DESPARATLY SLOWLY THE REMAINS OF PASSAGE DEBRIS 
THAT ENCUMBERED THE LOWER PART OF THE DOORWAY WAS 
REMOVED. WITH TREMBLING HANDS I MADE A TINY BREACH IN THE 
UPPER LEFT HAND CORNER AND THEN WIDENING THE HOLE A LIT- 
_TLE I INSERTED THE CANDLE AND PEERED IN. THE HOT AIR ESCAP- 
ING FROM THE CHAMBER CAUSED THE FLAME TO FLICKER BUT 
PRESENTLY DETAILS OF THE ROOM WITHIN EMERGED FROM THE 
MIST X CAN YOU SEE ANYTHING Q” 


(U/FOTHO) This passage is from a book written by Howard Carter, and it’s referring to the open- 
ing of King Tut's tomb back in November 1922. 


(U//EOGUOX-A couple of other things also need to be pointed out. There's another misspelling. The 
second word of the decrypting of this passage, DESPARATLY should be DESPERATELY, but it 
did indeed decrypt as shown above. Also, remember how the solution to this portion of the cipher 
began by placing a U next to the Q? Well, in the solution the Q is not followed by a U. Good luck 

never hurts when doing cryptanalysis. 


| (U//FOBO) Working back to discover the order in which the columns were extracted from this 


transposition matrix, we recall that the cipher began with END, followed by the YAHR in which 
the Y, A and R were slightly raised on the sculpture. The END occurs near the right side of the 
matrix, and reads from bottom to top. YAHR was the second column extracted from the matrix. It's 
seven columns to the left of the END column, and also was extracted from bottom to top. Seven 
more columns to the left we see OHNL reading upwards. In fact, this ‘ "seven columns to the left” 
property continues throughout the entire process. | 


(U//EQUYOFFig. 20. Enumeration of the columns by the order in which they were extracted 


SLOWLYDESPARATLYSLOWLYTHEREMAINSOFPASSAGEDE... 

ASREMOVEDWITHTREMBLINGHANDSIMADEATINYBREACH... 

OLEALITTLEIINSERTEDTHECANDLEANDPEEREDINTHEH.. 

FLICKERBUTPRESENTLYDETAILSOFTHEROOMWITHINEM... 
9 8 7 


. BRISTHATENCUMBEREDTHELOWERPARTOFTHEDOORWAYW 
. INTHEUPPERLEFTHANDCORNERANDTHENWIDENINGTHEH 
. .OTAIRESCAPINGFROMTHECHAMBERCAUSEDTHEFLAMETO 
. ERGEDFROMTHEMISTXCANYOUSEEANYTHINGQ 
6 5 4 3 2 1 
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(U/FGUO) Because of the values are occurring at an interval of seven, we can actually recreate a 
matrix that's seven columns wide to represent the ordering of the columns. The number 49 repre- 
sents the leftmost column, FAOS when reading from bottom to top. It was the 49th column 
extracted from this matrix. Next, the 12 represents the second column from the left, LLSL when 

. reading upward. It was the 12th column pulled from the matrix. 


(U//FOUOYt ig. 21. Matrix containing the order in which the columns were extracted, reading left 
to right, top to bottom. 


8 
7 
`6 
Б 
4 
3 
2 
1 
6 


со 





(UZEGUOWithin this box there is a nice ordering. 1-12 in the second column, 13-24 in the 4th 
column, 25-36 in the sixth column, 37-49 in the first column, 50-61 in the third column, 62-73 in 
the fifth column, 74-85 in the seventh column, and at the very bottom of the second column is the 
86. 
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(U/FF946) It was noticed that if these columns are ordered, they form a numeric key of 
4152637. Ifa numeric key is created form the word KRYPTOS, it would be 14 73 62 5. If 
this order is written in reverse beginning with the R column, the one labeled with a 4, we would 
get the 4 1 5 2 6 3 7 order.. 


(0/ΕΘ5Θ) ΕΙΡ. 22. An attempt to explain the ordering of the column key values 


(b) (1) 
(ο) (3) -50 USC 302441) 
PL 86-36/50 USC 3605 


QN P N (Q i> (n O + со 





(U//FO€9j At this point, having solved two of three parts, work returned to the first two lines of 
cipher on the sculpture, which consisted of 63 characters. ` 


(U//FGUO) Fig. 23. First two lines of KRYPTOS sculpture 
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(U//FOUOy Because it worked so well the last time, frequency counts were made for five alpha- 
bets with the cipher arranged in KRYPTOS keyword-mixed order. 


(U//FOUO}Fig. 25. Frequency counts using 5 alphabets for the first 63 characters of cipher. 





(О/ЖӨБӨУЕ ive occurrences of the cipher letter Y in the third alphabet were immediately noticed. 
The easiest thing to try is to match the most frequently occurring character in English, E, to the 
cipher Y and see what happens. Using the KRYPTOS keyword-mixed alphabet again, just because 
it worked so well last time, we get this alignment and plaintext: 


(U//FOUGMHr ig. 26. Alignment of KRYPTOS keyword-mixed alphabet with frequencies from 
third cipher alphabet, and resulting plaintext: 


115-1-----1-.-----1-1-1- 

CDEFGHIJLMNQUVWEXZKRYPTO 

EMUFP HZLRF AXYUS DJKZL DKRNS HGNFI VJYQT QUXQB 
T.. ..K.. ..E.. ..C.. ..D.. ..Y.. ..E.. ..A.. 


QVYUV LLTRE VJYQT MKYRD MFD 
.E.. ..G.. ..E.. ..E.. ..N 





(UA4EGUO) Nothing looks terrible here, but there's nothing really to build off, like a О to place aU 
after. Eventually, it was discovered that the first alphabet frequencies matched pretty well with 
this alignment, giving these recoveries: 


(U/FO¥0}Fig. 27. Alignment of KRYPTOS keyword-mixed alphabet with frequencies from 
first cipher alphabet, and resulting plaintext 


-------1--21--2--12 
WXZKRYPTOSABCDEFGHI 


EMUFP HZLRF AXYUS DJKZL DKRNS HGNFI VJYQT QUXQB 
B.T.. E.K.. T.E.. A.C.. A.D.. E.Y.. N.E.. L.A.. | 


QVYUV LLTRE VJYQT MKYRD МЕР 
L.E.. H.G.. N.E.. I.E.. I.N 
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(U//FOUOy This looks very good as there are a limited number of recoveries that can be placed 
between some of these recoveries. Certainly a vowel needs to land between the B and T at the 
beginning in the second alphabet. And at the very end, maybe an O between the I and N. That was 
attempted, and this is what happened: 


(U//FOUO) Fig. 28. Alignment of KRYPTOS keyword-mixed alphabet with frequencies from 


` Second cipher alphabet, and resulting plaintext: 


2-----------11 
NQUVWXZKRYPTOS 


EMUFP HZLRF AXYUS DJKZL DKRNS HGNFI VJYQT QUXQB 


BET.. EMK.. TLE.. ACC.. AND.. ESY.. NCE.. LHA.. 


QVYUV LLTRE VJYQT MKYRD MFD 
LIE.. HDG.. NCE.. INE.. ION 





(UZFOUO) We didn't do too badly. While we may have hoped for an H to land between the T and 
E, we got TLE. But that's possible in a word like GENTLE or KETTLE. The ION at the end looks 
great and we'd like to see a T or S land before it. And the two occurrences of NCE, in words like 
GLANCE and ONCE look super. 


((/ғенеҙ But there are some recoveries that don't look too great. EMK in the first line is not the 
nicest letter combination, and the HDG in the bottom line is downright ugly. But then someone 
thought that the first set of three recoveries (BET) looks good, the second (EMK) doesn't, the third 
(TLE) looks good, the fourth (ACC) is not so good, the fifth (AND) is good, and so on. It seems to 
alternate between good and not-so-good all the way through. So maybe it really was periodic 
polyalphabetic with 10 alphabets. 


(U//FO'9O) If the assumption that 10 alphabets and polyalphabetic substitution is used, this is 
what we have at this point: 


(U/i&OUOFi ig. 29. Recoveries for first three alphabets of 10-alphabet polyalphabetic substitu- 
tion. 


EMUFPHZLRF AXYUSDJKZL DKRNSHGNFI VJYQTQUXQB 





(U//FOLO3-One nice thing that happens here is that the letter occurring before each of the NCEs is 
different. They're both most likely vowels. The TLE will serves as a nice confirmation to show 
this is the right track. 


| 22 


DOCID: 4145037 


“CONF EER REC EO EER 


(U/fFOUO) This was done, and here’s the resulting plaintext after all the letters were recovered. 


(U/POO0O) Fig. 30. Plaintext for first two liries of KRYPTOS sculpture. 


EMUFPHZLRF AXYUSDJKZL DKRNSHGNFI VJYOTOUXOB 
BETWEENSUB TLESHADING ANDTHEABSE NCEOFLIGHT 


OVYUVLLTRE VJYÖTMKYRD MFD 
LIESTHENUA NCEOFIOLUS ION 





(рлвене п a more readable form, the plaintext says: 


“BETWEEN SUBTLE SHADING AND THE ABSENCE OF LIGHT LIES THE 
NUANCE OF IQLUSION” 


(U//EƏLƏ) Yet another typographical error in the plaintext. The correct decryption is indeed 
IQLUSION instead of ILLUSION, which is what is obviously meant. 


(ЈУТОВО) Recovering the polyalphabetic substitution matrix used, the plain and cipher compo- 
nents are the keyword-mixed sequence based on KRYPTOS, with a repeating key of PALIMP- 
SEST. 


(UA4FOUO) Fig. 31. Decryption matrix for first two lines of KRYPTOS sculpture. 


η} (η bJ O tg Z H HE: > g w 
OPM m r d Z G = Z Hd = 
to g G) J O O tH! Z G O =< 
> Q m Q n q x O Ü m m 
tD D H D > < Z d tg Ἡ ια 
Q tj C, Ej UJ = O < "m tJ O 
O 98 CG E NONO 
= Q = GQ UN < x T U > 
J r Z, Bi A Z Ñ H Bj Uu 
Q H OO H m мач ΠΩ 
mz G c G Q < N јр ој 
 Γ! «4 Ε! T tO κ 4 = и ΕΙ 
G =< = = H d m U Z H πι 
t = > Z G O < d Ὁ G @ 
=O 8 O t'i nn gq O q ' m 
z qam q => d mn < = H 
O < =Z < Z J O p z = G 
GE KEON UU x Ot 
< > rg >< qq O p OQ t c: = 
SnNHAN CS tJ U Ü 8 < Z 
κ πο αν x= m Ω Hm SO 
t J (n G >< GQ) Ü m < x ο 
R KPKNTIEHMEOUa<A 
"πο πι ΠΙ ;] π = 
κ Ωω η g G, GQ dH O зд ж 
ΠΟ ΠΟ πε! πι στη м 





(U/PEHO} Palimpsest is a noun which means a “parchment, tablet, etc., that has been written 
upon two or three times, the previous text or texts having been imperfectly erased, and remaining 
therefore still partly visible.” 


(UZFOUO) Between the definition of Palimpsest and the-plaintext resulting from this passage, it 
makes one wonder if there isn’t something else on the sculpture that may have been overlooked. 
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(U/EOUO) At this point, three of four sections had been decrypted, and for those of us at NSA 
who've worked on this, and that numbers in the dozens, no one has ever gotten that last part. 


(U/4RG8OY- However, on April 19, 2006, the sculptor, James Sanborn, admitted publicly that there 
was an omitted letter in the second portion of the cipher, the section with the latitude and longi- 
tude coordinátes. Returning to that section, this was the polyalphabetic section with eight alpha- 
bets using the repeating key of ABSCISSA. | 


(О/ЖӘСӨУ Fig. 32. Decryption matrix for second portion of KRYPTOS cipher. 


O d Hd Q » d mn O ж 
Q O O m t O > tn ΒΝ 


: K 
A 
B 
s 
C 
I 
S 
S 
A 


m p p G OU > O vv 
Q m m i m WU OQ < 
g n Q Z= m Q td Ü v 
mH U UO Z Q O t3 m dH 
HH HO FH HQ ™ O 
G) trJ rJ GG H "J m: G) (n 
m Q Q < C Q H I > 
ышш кр шсұунш 
UHHNKEHELUN 
ru C m Zc == 
"ao t q O t: Z E tl 
z = = = q = O Z πὶ 
O Z Z 4 < Z q O Q 
cO O tg = O < c m 
< cC Οἱ -3 4Ο x= <H 
= < < O ta < b z Ci 
> = = (O >q = bn ми 
обрт мами 
мач шема мг 
DRA AW AK DO 
κακο J rg < G: 
U K K HOK J U < 
п ш тшт ζη ΠΙΟ 3 E 





(U//EGUO) Recall that the section in question is the one that ends with the “I D BY ROWS” 


(U/EQUO}Fig. 33. End of decryption of second part. 


.-..GNUVPDXV KPDQUMEB EDMHDAFM JGZNUPLG EWJLLAET G 
...SEIGHTMI NUTESFOR TYFOURSE CONDSWES TIDBYROW 8 


(U/ZEGUO3-Mr. Sanbom’s admission of an omitted letter came after seven years of hearing the 
phrase “I D BY ROWS,” and assuming all along it was some sort of “cryppie talk” used by solv- 
ers to explain what they had dome to reach this point. He never intended the cipher to say that, fig- 
uring by omitting a letter, it would merely cause the cipher to decrypt to random letters and not 
really say anything with meaning. And Mr. Sanborn claims that the omitted letter was for “aes- 
thetic reasons,” refusing to claim any oversight. 





(U/ZEGUO) The missing letter was a missing cipher letter S which should occur between the E 
and the W near the end of the cipher passage. By placing the missing S in its proper place, the new 
resulting plaintext looks like this: `. 


(UZFOUOJT ig. 34. Corrected decryption of second part after including missing cipher S. 


...GNUVPDXV KPDQUMEB EDMHDAFM JGZNUPLG ESWJLLAE TG 
...SEIGHTMI NUTESFOR TYFOURSE CONDSWES TXLAYERT WO 


(U//EGUO)J Instead of ending with “ID BY ROWS”, “LAYER TWO” is the new conclusion to 
this section. 
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(U//FEHO) So this is where we stand today. There are several clues which may or may not pertain 
to the solution of the missing fourth part. First, the three misspelled words, one from each section: 
IQLUSION, UNDERGRUUND and DESPARATLY. One person, on their website, tries to: be 
helpful by pointing out that if you take the two words used as repeating keys, ABSCISSSA and 
PALIMPSEST, you can anagram them to say “P.S. It's as simple as ABC.” While that's nice to 
know, I don’t know how it would figure into the actual solution of the fourth part. And we had a 
missing letter in the second part of the cipher. Could there possibly be a missing letter in the 
remaining section which i is presently making it impossible to find a solution? : 


(U//FOUO) Looking at the remaining 97 characters, they have a fairly flat distribution, though 
there are eight Ks which appear. 
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(U/2QUQ) There аге no long repeats, but there is a slight interval 7 property. 


(U//POUOy I have tried a number of things which might cause an interval 7 property.to appear, 
including Plaintext Autokey and Ciphertext Autokey, but I've yet to stumble upon something that 
gives either readable plaintext, or hints at the presence of a second encipherment layer. 


(U//FGUQ)-Work continues in spits and spurts, depending upon time, motivation, and ideas. 


(b) (1) 
(b) (3)-50 USC 3024(i) 
PL 86-36/50 USC 3605 
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